Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
File: HuXdRp9xw40T9Xxil5YiTMAg3BU.mft (raw, json)
Hash identifier: BiUcW+dKsagyXusTKo2Ep9YqfL8gc7nwWRErYHmB6gU=
Subject key identifier: 69:88:B0:27:1B:F1:D0:CF:8E:1E:78:8A:38:AD:BB:E4:AF:05:36:54
Authority key identifier: 1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
Certificate issuer: /CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Certificate serial: 019D29CEC759B51BD01C33E825BDD00DAEF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
Manifest number: 0C27
Signing time: Thu 26 Mar 2026 11:01:50 +0000
Manifest this update: Thu 26 Mar 2026 11:01:50 +0000
Manifest next update: Fri 27 Mar 2026 11:01:50 +0000
Files and hashes: 1: HuXdRp9xw40T9Xxil5YiTMAg3BU.crl (hash: /2IeVqLA9K6Kqm73SWof6G9uFs8k+BBG85wPaDzoPfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:c7:59:b5:1b:d0:1c:33:e8:25:bd:d0:0d:ae:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Validity
Not Before: Mar 26 11:01:50 2026 GMT
Not After : Mar 27 11:01:50 2026 GMT
Subject: CN=6988b0271bf1d0cf8e1e788a38adbbe4af053654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ec:87:55:f9:74:d7:a3:61:8b:c6:d1:4c:3d:
3e:ab:13:af:23:06:8b:36:a2:e3:0c:d1:47:95:a1:
19:49:b4:49:59:c8:e1:d9:7c:1e:2a:58:24:05:48:
f1:25:16:50:2a:a9:3d:80:70:47:d5:b6:0d:8d:e2:
fe:90:d5:64:07:6c:5d:70:46:e3:50:14:10:a0:29:
62:a2:67:1e:b1:5a:7d:32:8c:76:2c:65:e9:71:60:
5c:44:60:36:77:65:5c:08:7f:f5:0a:5d:cd:c1:36:
d4:0e:f1:a7:e0:b1:dc:e3:e3:1a:84:d5:f1:69:6f:
71:da:f0:ea:ba:fc:10:12:d8:f7:06:e4:4d:bd:92:
eb:1d:c3:33:43:36:6d:4f:de:72:bf:1e:bb:9a:20:
4a:8a:cb:05:0a:23:a6:ae:72:77:bd:84:e6:97:9b:
90:17:55:aa:5a:3a:ba:94:32:be:ae:6f:49:c3:a0:
28:50:33:f0:2d:fd:9b:fa:51:40:ae:f9:18:77:34:
3d:fe:d0:66:63:f0:b1:24:f1:f5:2b:ad:92:59:d6:
f8:a8:e6:6a:e6:97:57:4b:9a:66:fd:11:44:d4:12:
5f:1e:7e:9e:17:64:95:74:b5:00:ca:67:ed:bc:6d:
53:15:f2:55:53:38:f6:70:76:0b:f8:94:1a:b3:4b:
e5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:88:B0:27:1B:F1:D0:CF:8E:1E:78:8A:38:AD:BB:E4:AF:05:36:54
X509v3 Authority Key Identifier:
keyid:1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:55:c2:3e:ad:40:69:10:6b:03:a0:fd:1a:5a:ca:c8:7b:a3:
e2:dc:1f:d2:4e:2a:84:c4:8d:a9:62:56:ef:6a:08:71:9f:55:
b5:69:62:20:03:18:a6:3c:e6:c8:f1:0c:dc:ad:f4:cd:96:4f:
56:5e:85:11:ec:9f:5c:f1:5d:08:93:c6:ec:f8:f4:fb:ad:bb:
7d:43:66:6b:d5:71:7a:e4:27:ea:01:9a:c8:23:78:6f:ba:fb:
6d:da:25:1d:78:b4:44:a6:82:9e:77:0c:23:31:1e:28:66:07:
51:31:03:e6:02:c0:d9:bd:85:a5:93:54:7c:1f:90:ca:63:a8:
b8:27:d2:ae:40:73:a7:7b:24:f7:45:7b:2b:71:b8:ae:26:35:
0e:c0:f2:96:d9:6c:8e:ad:ea:9b:4e:a5:25:ad:41:29:a3:4c:
7e:48:4b:c3:1c:f2:50:f5:d7:56:51:88:6e:0f:00:fd:01:68:
aa:b5:a2:3d:0e:f0:d0:b6:6c:b3:99:07:5f:ef:64:50:2f:19:
89:28:5a:a8:b0:62:bf:57:73:52:f0:be:57:51:51:34:cb:26:
a0:00:af:00:ce:1f:e2:a7:2c:22:5b:15:6b:e9:22:3c:fa:ec:
6c:6b:48:c7:de:d8:0f:47:b7:a0:6a:e5:3a:c7:96:90:59:bd:
e8:de:27:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzsdZtRvQHDPoJb3QDa7yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZTVkZDQ2OWY3MWMzOGQxM2Y1N2M2Mjk3OTYyMjRjYzAy
MGRjMTUwHhcNMjYwMzI2MTEwMTUwWhcNMjYwMzI3MTEwMTUwWjAzMTEwLwYDVQQD
Eyg2OTg4YjAyNzFiZjFkMGNmOGUxZTc4OGEzOGFkYmJlNGFmMDUzNjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+yHVfl016Nhi8bRTD0+qxOvIwaL
NqLjDNFHlaEZSbRJWcjh2XweKlgkBUjxJRZQKqk9gHBH1bYNjeL+kNVkB2xdcEbj
UBQQoCliomcesVp9Mox2LGXpcWBcRGA2d2VcCH/1Cl3NwTbUDvGn4LHc4+MahNXx
aW9x2vDquvwQEtj3BuRNvZLrHcMzQzZtT95yvx67miBKissFCiOmrnJ3vYTml5uQ
F1WqWjq6lDK+rm9Jw6AoUDPwLf2b+lFArvkYdzQ9/tBmY/CxJPH1K62SWdb4qOZq
5pdXS5pm/RFE1BJfHn6eF2SVdLUAymftvG1TFfJVUzj2cHYL+JQas0vlMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmIsCcb8dDPjh54ijitu+SvBTZUMB8GA1UdIwQY
MBaAFB7l3UafccONE/V8YpeWIkzAINwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNmU4OTgtNjEyYy00ODVmLWIwMjct
ZjQyMjQzMDZiYTM1LzEvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yNmU4OTgtNjEyYy00ODVmLWIwMjctZjQyMjQzMDZiYTM1
LzEvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAplXCPq1A
aRBrA6D9GlrKyHuj4twf0k4qhMSNqWJW72oIcZ9VtWliIAMYpjzmyPEM3K30zZZP
Vl6FEeyfXPFdCJPG7Pj0+627fUNma9VxeuQn6gGayCN4b7r7bdolHXi0RKaCnncM
IzEeKGYHUTED5gLA2b2FpZNUfB+QymOouCfSrkBzp3sk90V7K3G4riY1DsDyltls
jq3qm06lJa1BKaNMfkhLwxzyUPXXVlGIbg8A/QFoqrWiPQ7w0LZss5kHX+9kUC8Z
iShaqLBiv1dzUvC+V1FRNMsmoACvAM4f4qcsIlsVa+kiPPrsbGtIx97YD0e3oGrl
OseWkFm96N4ncA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:17:16 2026 by rpki-client